Allbridge Core exploit from July 19, 2026 ($1.65M+) — team offers white-hat recovery: 80% return within 48 hours for 20% bounty, or legal action and law enforcement referral.
Security & Exploits ·
Allbridge paused its cross-chain protocol after a $1.65M exploit on July 19, 2026 involving a flash loan attack against Solana stablecoin pools. The team sent an on-chain message to a wallet believed connected to the incident, offering a white-hat settlement: the address could retain 20% of the stolen funds as a bounty in exchange for returning 80% within 48 hours, with no legal pursuit or law enforcement involvement following recovery.
The settlement proposal represents an alternative to full enforcement. If the wallet does not comply within the stated timeframe, Allbridge indicated it will escalate to comprehensive blockchain forensics, exchange notifications, and law enforcement referral. The message was transmitted from one Ethereum address to another on mainnet, creating a documented record of both the offer and the team's terms.
What remains unclear is whether the wallet holder will respond to the settlement offer, the underlying vulnerability that enabled the flash loan attack, or whether Allbridge has already commenced enforcement steps given no public confirmation of recovery has been disclosed.